Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33322e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e33322e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: N6zkRnoiPLFeF1euyOF/VMGOatA5OZ8/2kjPdB4wzXw=
Subject key identifier: D5:15:3E:61:09:64:AE:DC:7F:84:37:15:F1:4E:93:B5:AB:2B:1D:2E
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 78513C7CC05087966EDCFFDD7CD01555768C0C66
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33322e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 17:12:40 +0000
ROA not before: Tue 03 Dec 2024 17:07:40 +0000
ROA not after: Tue 02 Dec 2025 17:12:40 +0000
asID: 4761
IP address blocks: 116.206.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:51:3c:7c:c0:50:87:96:6e:dc:ff:dd:7c:d0:15:55:76:8c:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:07:40 2024 GMT
Not After : Dec 2 17:12:40 2025 GMT
Subject: CN=D5153E610964AEDC7F843715F14E93B5AB2B1D2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:25:3e:95:61:95:93:de:2a:64:d8:51:94:
d5:0c:82:6d:6d:0e:bf:4e:7b:a5:f7:0f:73:df:34:
f4:ee:c3:16:26:8e:74:30:6c:69:8f:c4:82:07:5c:
c8:ff:9e:a9:f3:58:4b:ba:96:c1:1a:fc:48:39:90:
bd:16:fe:a7:31:06:e0:e8:a9:00:e2:e9:f0:15:db:
64:b6:77:07:5b:a2:d3:7b:72:93:42:f6:e3:ea:69:
af:e6:61:aa:32:d5:03:b0:32:5b:59:51:97:e3:37:
ed:ed:b8:6b:d5:9e:1d:61:ef:e2:bf:b0:34:3b:f0:
01:63:de:5d:12:de:5c:64:50:fc:d9:26:df:73:d1:
54:55:06:f3:f0:f9:a7:fb:78:b4:d3:09:ba:59:6a:
10:a1:b6:c1:6a:1d:ae:3c:76:db:6a:e9:5a:28:a0:
08:59:4b:6e:74:fe:e6:2c:87:29:e4:13:26:37:0d:
46:7f:4e:27:c4:a5:fd:36:73:bf:ce:23:47:16:ba:
09:23:dd:83:68:45:3a:d9:80:ef:17:d2:82:53:85:
db:53:9d:a1:a9:6a:12:14:df:26:73:78:ea:08:14:
5d:a8:75:bc:d2:75:7a:39:e7:05:90:81:20:f6:3a:
ad:29:90:75:6a:75:e5:ba:d2:00:88:b9:96:45:2f:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:3E:61:09:64:AE:DC:7F:84:37:15:F1:4E:93:B5:AB:2B:1D:2E
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33322e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.32.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bd:b4:10:85:b8:7d:98:46:a0:5c:99:f7:27:2f:7e:ee:4a:
35:e9:62:52:9f:05:7a:66:18:21:97:a8:24:05:3b:62:45:68:
05:ad:66:97:65:0b:10:51:7e:88:7a:c9:62:8a:a2:8b:6d:7b:
6d:98:1d:16:6f:bd:25:5b:8d:b0:a6:f1:5e:2b:17:5a:48:3b:
6d:d1:c3:e5:6b:60:c1:64:5a:8b:f0:0b:82:1f:cd:d4:3a:19:
20:64:0d:d9:68:8d:a7:cd:c8:60:6f:b3:91:63:a1:f4:93:48:
9e:7c:d1:be:c0:d0:62:c8:12:dc:9b:66:77:35:a3:59:da:c0:
cd:09:d6:e4:25:1d:c2:f3:54:a0:a3:4d:81:26:43:09:39:80:
f4:7c:a1:d6:73:05:ea:f8:4e:49:82:80:73:53:ad:13:62:73:
9b:0b:c4:c4:f7:a6:db:dd:b3:48:ae:45:bd:a5:f7:d8:88:1f:
62:91:ff:22:f5:e3:c5:99:76:35:b3:01:03:a3:0f:6f:03:12:
24:89:55:1e:38:95:c5:27:ae:e9:0d:38:41:76:f5:a2:6a:a9:
b7:59:ef:e3:fd:81:de:9d:d1:7a:7a:a5:59:67:ac:d6:3d:76:
a9:74:04:ce:1a:35:9b:db:27:24:f1:9f:27:34:15:e4:16:0a:
43:12:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:21:49 2025 by rpki-client